$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4cbd620a-274b-31bf-aebb-c21d6accf0a3.roa File: 4cbd620a-274b-31bf-aebb-c21d6accf0a3.roa (raw, json) Hash identifier: zwKmi+Baapq+bdrAAel501iAbGMvdMcNQ6BHJPzxdmU= Subject key identifier: 89:18:7A:E2:84:B3:61:F1:D5:60:17:C2:06:21:B0:47:DE:C0:BC:D6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584ED305358A8D1284E99829AA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4cbd620a-274b-31bf-aebb-c21d6accf0a3.roa Signing time: Thu 13 Aug 2026 14:54:34 +0000 ROA not before: Thu 13 Aug 2026 14:54:34 +0000 ROA not after: Wed 11 Nov 2026 15:54:34 +0000 asID: 26134 IP address blocks: 72.13.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d3:05:35:8a:8d:12:84:e9:98:29:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 13 14:54:34 2026 GMT Not After : Nov 11 15:54:34 2026 GMT Subject: CN=e5b5141d-59fd-414a-9ac7-8fce6066aff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f5:0b:8b:45:a5:b1:c0:5e:25:00:fd:8b:58: bb:cf:be:48:d1:37:70:db:58:ed:29:8c:7e:7c:38: d6:06:86:00:86:76:3e:12:01:f3:f6:f4:50:4a:67: 62:00:25:54:cf:3c:1c:1a:63:43:4e:d5:ff:40:1a: 68:d1:00:18:a8:12:25:7b:ca:66:b2:a7:ee:53:8b: e0:5e:34:35:01:b0:2d:2d:6b:56:af:cd:a9:3a:b9: b9:67:8f:ac:ab:93:f5:5a:b9:99:ba:75:76:72:2b: a4:88:42:89:d0:e6:ab:61:45:aa:db:6a:90:81:f4: 7d:b3:4a:54:7b:bd:7c:92:53:a8:a7:ed:bf:9b:7c: e0:48:fa:0f:e2:b0:c9:66:6b:7f:ba:80:62:cf:08: 04:6a:61:e0:61:4b:49:c0:bf:18:87:32:ec:fa:73: 33:ed:e4:8c:e5:bb:a7:ca:88:76:3c:ed:2f:6a:74: ac:16:a7:c5:46:b7:64:46:ef:da:6e:fa:1f:ef:04: 10:2d:c5:7b:61:90:52:5a:7a:d7:7b:1c:fe:6b:1b: 6f:b4:c3:6e:81:5d:17:71:89:4d:0d:6b:cd:63:c9: 03:cb:70:74:99:72:c4:7f:0b:2e:00:2e:49:82:4d: 1a:ac:75:4b:85:7f:72:ed:46:5a:85:63:3c:43:4e: e4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:18:7A:E2:84:B3:61:F1:D5:60:17:C2:06:21:B0:47:DE:C0:BC:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4cbd620a-274b-31bf-aebb-c21d6accf0a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:30:f6:a0:8d:c4:b8:3a:b2:ae:7d:02:0d:29:cb:3b:d1:1c: 7a:61:b7:50:b6:ba:fd:83:57:70:1b:df:46:f9:1a:41:67:c3: c9:c2:31:21:f1:6c:c4:1a:05:9e:32:d4:19:a0:55:f2:5e:3e: f8:f1:66:52:bc:eb:b3:c2:80:46:9e:2d:50:47:13:94:2e:d9: 2f:ac:a3:04:f8:6a:fd:27:f0:7a:e7:00:fe:96:09:bf:7a:a4: 22:33:1f:3b:ba:d0:36:a4:a7:12:f9:fa:e0:fa:7e:d8:c6:45: 15:24:63:9f:a7:55:d3:b2:1e:c1:6d:4c:51:94:be:0c:87:61: 06:bb:9d:b1:5f:f1:23:eb:02:15:0b:5f:fb:f5:fb:3e:95:b9: 2c:2c:e2:e3:0c:18:34:4b:a7:cd:88:28:32:de:ae:9e:63:ab: 37:39:93:f7:9d:a8:7c:05:0c:48:00:d5:56:ab:c4:22:e4:c1: ba:ba:98:7c:03:ca:e1:e4:67:71:bb:b3:77:95:4c:8b:6a:43: cc:38:55:00:1e:df:f0:fa:ef:3a:3c:ec:85:93:95:a9:0c:ee: 29:96:de:49:1d:6a:4e:53:0e:25:32:e1:ac:bd:d9:20:df:5e: 4a:44:17:33:6c:59:dc:45:ec:56:97:83:cf:72:ad:ca:9d:35: 8a:46:4f:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7TBTWKjRKE6ZgpqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgxMzE0NTQzNFoXDTI2MTExMTE1NTQzNFowLzEtMCsGA1UEAxMk ZTViNTE0MWQtNTlmZC00MTRhLTlhYzctOGZjZTYwNjZhZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfULi0WlscBeJQD9i1i7z75I0Tdw21jtKYx+ fDjWBoYAhnY+EgHz9vRQSmdiACVUzzwcGmNDTtX/QBpo0QAYqBIle8pmsqfuU4vg XjQ1AbAtLWtWr82pOrm5Z4+sq5P1WrmZunV2ciukiEKJ0OarYUWq22qQgfR9s0pU e718klOop+2/m3zgSPoP4rDJZmt/uoBizwgEamHgYUtJwL8YhzLs+nMz7eSM5bun yoh2PO0vanSsFqfFRrdkRu/abvof7wQQLcV7YZBSWnrXexz+axtvtMNugV0XcYlN DWvNY8kDy3B0mXLEfwsuAC5Jgk0arHVLhX9y7UZahWM8Q07kyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkYeuKEs2Hx1WAXwgYhsEfewLzWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGNiZDYyMGEtMjc0Yi0z MWJmLWFlYmItYzIxZDZhY2NmMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcw9qCNxLg6sq59Ag0pyzvRHHpht1C2uv2DV3Ab30b5GkFnw8nCMSHx bMQaBZ4y1BmgVfJePvjxZlK867PCgEaeLVBHE5Qu2S+sowT4av0n8HrnAP6WCb96 pCIzHzu60DakpxL5+uD6ftjGRRUkY5+nVdOyHsFtTFGUvgyHYQa7nbFf8SPrAhUL X/v1+z6VuSws4uMMGDRLp82IKDLerp5jqzc5k/edqHwFDEgA1VarxCLkwbq6mHwD yuHkZ3G7s3eVTItqQ8w4VQAe3/D67zo87IWTlakM7imW3kkdak5TDiUy4ay92SDf XkpEFzNsWdxF7FaXg89yrcqdNYpGT1w= -----END CERTIFICATE-----Generated at Wed Aug 19 15:11:01 2026 by rpki-client